UNIFE - Union of European Railway Industries

04/20/2026 | Press release | Distributed by Public on 04/21/2026 09:00

Expert guidance on the implementation of the Cyber Resilience Act (CRA) in mainline and urban railways

20 Apr 2026

This document aims to explain the impacts and boundaries between the Cyber Resilience Act (EU) 2024/2847 (hereinafter, "the CRA") and its compliance with the legal framework for railway vehicle authorisation (Commission implementing regulation (EU) 2018/545 (hereinafter, "the PA VA") establishing practical arrangements for the railway vehicle authorisation process pursuant to Directive (EU) 2016/797 on the interoperability of the rail system within the European Union (hereinafter, "the IoD").

The annex outlines the distinct separation of cybersecurity compliance demonstration from the authorisation processes for railway vehicles.

UNIFE - Union of European Railway Industries published this content on April 20, 2026, and is solely responsible for the information contained herein. Distributed via Public Technologies (PUBT), unedited and unaltered, on April 21, 2026 at 15:00 UTC. If you believe the information included in the content is inaccurate or outdated and requires editing or removal, please contact us at [email protected]